Inspector general report: NIST mismanagement has crippled the National Vulnerability Database with 27,000+ unprocessed vulnerabilities
By
Suzanne Smalley
A five-star bake. Worth schmearing, sharing, saving.
Summary
A Department of Commerce inspector general report reveals that NIST's National Vulnerability Database (NVD) has been severely crippled by mismanagement and strategic failures. The backlog of unprocessed security vulnerabilities ballooned from 13,000 in February 2024 to over 27,000 by the end of 2025, undermining the database's utility and public trust. The NVD is a critical cybersecurity tool used by organizations worldwide to track and respond to security threats.
Key quotes
· 2 pulledundermining the NVD's utility and public trust
The NVD is a critical tool that
You might also wanna read
NIST Announces Policy Change: National Vulnerability Database to Stop Enriching Most CVEs
The US National Institute of Standards and Technology (NIST) has announced a significant policy change for the National Vulnerability Databa
MongoDB Security Update: Vulnerability CVE-2025-14847 ("Mongobleed") Identified in December 2025
MongoDB has identified a security vulnerability (CVE-2025-14847, informally called "Mongobleed") affecting MongoDB Server. The company outli
MongoBleed Vulnerability (CVE-2025-14847): Critical MongoDB Security Flaw Explained
MongoBleed (CVE-2025-14847) is a critical security vulnerability affecting MongoDB databases since 2017. The bug exists in the zlib1 message
PBKDF2 JS Lib: Improper Input Validation Vulnerability
LLM-powered scanners set to overwhelm open source maintainers with security vulnerabilities by 2026
The article warns that by summer 2026, LLM-powered code scanners will dramatically increase the rate of security vulnerability discoveries i
Challenges in Reporting Vulnerabilities in Belgian Banking System
The article discusses the author's experience with reporting a vulnerability in a Belgian bank's online platform through the Coordinated Vul
